top | item 45460411

(no title)

geek_at | 5 months ago

btw you opensourced also your website

~$ curl https://foxmoss.com/.git/config [core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/FoxMoss/PersonalWebsite fetch = +refs/heads/:refs/remotes/origin/ [branch "master"] remote = origin merge = refs/heads/master

discuss

order

vanyle|5 months ago

The git seems to only contain the build of the website with no source code.

The author is probably using git to push the content to the hosting server as an rsync alternative, but there does not seem to be much leaked information, apart from the url of the private repository.

hcaz|4 months ago

It exposed their committer email (I know its already public on the site, but still)

You can wget the whole .git folder and look through the commit history, so if at any point something had been pushed which should not have been its available